Supply-Chain Attacks Are Becoming Crypto’s Biggest Risk
-

The Snap Store incident reflects a broader shift in crypto-related threats. Instead of attacking smart contracts directly, hackers are increasingly exploiting software distribution channels, update mechanisms, and trust relationships — areas where users rarely expect danger.
Data from CertiK shows that while the number of crypto hacks declined in 2025, total losses still reached $3.3 billion. Fewer incidents caused far greater damage, with supply-chain attacks alone accounting for $1.45 billion in losses. As onchain security improves, attackers are moving upstream — and the weakest link is no longer the protocol, but the software people trust.
-
fewer hacks but more damage is such a bad trendline